Security Engineer

SpaceX•Starbase, TX

24d•Onsite

About The Position

SpaceX is seeking a Security Engineer to join Information Security and help protect and advance the SpaceX mission. The role writes and operates the software and infrastructure behind SpaceX security standards, protecting the confidentiality, integrity, and availability of systems and processes across the enterprise and defending against loss of control or confidence in those systems.

Requirements

Bachelor's degree in computer science or another STEM discipline, or 2+ years of professional experience in security software development in lieu of a degree.
Experience with Python, Go, C#, C/C++, or Rust.
Experience designing and implementing security solutions for operating systems, distributed systems, or other enterprise or large-scale infrastructure.
Must be willing to work extended hours and/or weekends as needed.
Must work onsite; hybrid or remote work will not be considered.
Ability to pass an Air Force background check for Cape Canaveral.
Must meet applicable U.S. Government export-control eligibility requirements or be eligible to obtain the required authorizations.

Nice To Haves

Experience writing, shipping, and operating secure software.
Knowledge of Linux, Windows, and macOS system internals.
Knowledge of public key infrastructure (PKI) and related technologies.
Experience with SAML, OIDC, and OAuth.
Experience with TPMs and HSMs.
TCP/IP and UDP knowledge sufficient to build and debug services.
Ability to navigate large, interactive systems.
Experience with web APIs, HTTP-RPC, and REST.
Experience hardening Windows, Linux, and macOS to enterprise security controls.
Experience with macOS and Windows code-signing and enterprise application deployment.
Root-cause debugging under time pressure.

Responsibilities

Design, build, and maintain technology that protects SpaceX systems, networks, and data.
Stand up authentication and identity services, multi-factor authentication, and network access control identity.
Automate identity lifecycle for Information Security and partner organizations.
Run backend infrastructure that network security services depend on.
Operate web application firewalls and other application-level security controls.
Enforce cloud security policy, centralized configuration, and monitoring.
Document systems and services, keep them working, and advise other teams on them.
Identify threats and gaps with security and IT, then deliver software and deployment changes that reduce risk.
Deliver solutions that are scalable, repeatable, maintainable, and secure.
Coordinate with information security, physical security, IT, HR, legal, software, and other partners.